Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: MqHC/bPpogCuPA69JD+Vq5s25un0gFxaxKzpQT5qsYs=
Subject key identifier: ED:C7:F6:BA:FE:45:35:DB:7F:E0:BD:F4:78:4F:85:B9:CF:51:87:BB
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 019D27A8CBC1FFDD0D625360EBEECBC170A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 0832
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: OIjgrLITKa0nRTgk4B0VC1nsa5ktyOZmCEXeR8EJD24=)
2: W47tZvu_CAnfpr4QCettmz3h4VA.roa (hash: m6c/GDR1Z9ctHQPSYVmUi8E4ot+sOPV9fr/Kpm+Mrgw=)
3: vTRqCtvnjV5ULYp3QVGnOSeLI48.roa (hash: XZSHqXZ9/2xuTC2yVf4djicrqgDxlpDHvGc8OnjW13s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:cb:c1:ff:dd:0d:62:53:60:eb:ee:cb:c1:70:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=edc7f6bafe4535db7fe0bdf4784f85b9cf5187bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:e0:cc:ee:d0:0d:06:68:22:9a:15:6f:2b:
4d:a0:77:d5:76:99:cf:dd:1f:89:e8:0d:2f:49:8c:
2b:ba:a4:86:d5:30:68:9e:5a:23:fd:8e:90:59:04:
67:95:83:1a:64:07:65:72:2e:a0:d2:40:a5:99:e5:
2c:bd:45:e3:e0:7c:c4:1a:62:26:e6:26:b1:63:e7:
09:74:b9:bb:be:ac:a7:94:0d:d1:67:0f:cc:1a:87:
b0:be:0e:1e:b4:35:c3:63:bf:01:c5:4d:51:4d:d3:
b0:d3:19:9c:aa:79:4f:9a:ad:01:e4:0f:16:d5:c6:
e5:63:f4:01:50:fb:86:c8:4e:2c:36:41:40:00:48:
1c:ac:1f:1b:38:44:91:37:93:40:36:10:88:b2:d7:
0f:14:87:5e:55:49:75:60:a1:01:1b:37:11:fd:d9:
8c:2d:33:6e:ea:ae:61:a1:f9:f6:85:92:63:4b:c2:
7e:a2:6a:6a:54:d1:88:56:7a:2b:34:b5:33:90:ed:
72:45:f6:a7:d2:f7:84:b3:d0:cd:a3:98:76:56:d5:
11:34:92:71:fa:78:d9:aa:59:59:57:33:56:02:a4:
14:2d:d2:06:55:54:14:96:44:63:e6:c9:02:bb:b8:
76:df:75:1d:fe:05:24:6b:bb:97:60:9c:6c:2c:18:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C7:F6:BA:FE:45:35:DB:7F:E0:BD:F4:78:4F:85:B9:CF:51:87:BB
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:93:03:5d:e2:33:dc:4c:a9:23:a0:7f:60:9d:55:d8:4f:4a:
c6:b4:b2:b3:57:80:8e:64:8b:67:76:65:a3:33:44:74:e4:76:
0f:b8:dc:b8:a7:eb:60:6f:33:f2:05:3b:78:15:2e:af:59:c7:
57:1c:19:3e:3b:73:1a:38:f2:29:6c:47:ff:12:03:11:10:27:
d9:f7:9b:a0:00:57:c1:ce:30:6d:c2:fa:2e:87:31:de:20:20:
d2:9f:db:f1:d0:a3:44:fb:ec:e5:c3:91:27:40:4a:a3:9d:e3:
81:77:a7:8d:4d:dd:28:33:70:29:8a:d2:80:29:f1:b3:d3:bd:
77:63:59:3e:52:6f:ab:1c:98:83:da:ea:98:8c:aa:67:b1:1e:
25:6a:09:d7:e1:e8:fa:8b:30:8c:19:e9:6d:e7:4e:b0:6e:73:
91:12:5b:b7:77:b3:e9:88:e3:25:2e:f3:33:dc:08:6d:b3:c2:
62:34:d9:14:53:37:5a:bb:5b:23:e0:d3:da:c0:76:e5:7f:1c:
08:18:4b:97:c7:3d:43:84:78:14:8f:99:bd:79:2e:c0:db:08:
4d:bd:41:30:3b:9c:95:ee:ab:e9:73:6d:8b:00:d1:b1:9e:98:
fa:f1:7b:f3:26:5c:4a:69:af:f8:20:cf:fd:8f:76:c3:ae:88:
01:ac:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:34 2026 by rpki-client